Paper shows agent workflows enabling data exfiltration

The author argues that AI agent workflows are vulnerable to security failures when tool permissions alone fail to constrain data flow across multi-agent delegations. To prevent unauthorized actions and data exfiltration, the author proposes using transitive policies enforced by a trusted runtime outside the models, combining authorization, information-flow restrictions, and action history. Open article →